Privacy & Cookies Policy

PRP UK Ltd ("PRP", "we", "us", "our") is a multidisciplinary engineering consultancy with offices in Leicester, Northampton, and London. We are the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, contact us at leicester@prp.uk.com or 01162 751710.

We collect personal data directly from you when you interact with our website, in the following ways:

• Contact form: name, email address, phone number, company name (optional), service interest, and the content of your message.
• Job applications: name, email address, phone number, your CV file, and any cover message you provide.
• Pulse chatbot: the questions and messages you send to our AI assistant, together with a randomly generated session identifier stored in your browser's local storage (not a traditional cookie, see "Cookies & Local Storage" below) so the assistant can maintain context across a conversation.
• Technical data: standard web server logs (IP address, browser type, pages visited) collected automatically as part of normal website operation and security monitoring.

We use the personal data described above for the following purposes:

• To respond to enquiries submitted through our contact form.
• To process and respond to job applications, including sharing your application internally with relevant hiring staff.
• To operate the Pulse chatbot, including generating responses to your questions and, where relevant, retrieving related information from our knowledge base.
• To maintain the security, performance, and proper functioning of our website.
• To comply with our legal obligations.

Our legal basis for processing this data is typically your consent (by submitting a form or using the chatbot), our legitimate interest in responding to enquiries and operating our business, and, for job applicants, the steps necessary to consider entering into a contract of employment with you.

We use a small number of trusted third-party service providers to operate our website and communications. These providers process personal data on our behalf, under contractual terms requiring them to protect it appropriately.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

We retain personal data only for as long as necessary for the purposes described in this policy:

• Contact form submissions are retained for as long as reasonably necessary to respond to and resolve your enquiry, and are then deleted or anonymised.
• Job application data is retained for the duration of the recruitment process and, if unsuccessful, for a limited period afterwards in case a suitable future role arises, unless you ask us to delete it sooner.
• Chatbot conversation history is retained to allow the assistant to maintain context across your visits. You can request deletion of your chatbot conversation history at any time by contacting us with your session details.

Our website makes minimal use of cookies and browser storage:

• Pulse session identifier: a randomly generated identifier is stored in your browser's local storage (not a cookie) so the chatbot can recognise your ongoing conversation. This identifier does not, by itself, identify you personally.
• We do not use third-party advertising cookies or tracking pixels, and we do not display advertising on this website.

You can clear your browser's local storage at any time through your browser settings, this will start a new chatbot session on your next visit.

Under UK GDPR, you have the following rights in relation to your personal data:

• The right to be informed about how your data is used (this policy).
• The right to access a copy of the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure of your data in certain circumstances.
• The right to restrict or object to our processing of your data.
• The right to data portability.
• The right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.

To exercise any of these rights, contact us at leicester@prp.uk.com. We will respond within one month, as required by law.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including encrypted data transmission and access controls on the systems described above. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

Our website is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

This policy was last updated on 7 August 2026. We may update this policy from time to time to reflect changes in our practices or for legal reasons. Significant changes will be reflected by an updated date at the top of this page.